Analysis
-
max time kernel
93s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 06:40
General
-
Target
bd94e873771fc47f7c5beb5b64a5fc8b85edfd0b86fe48cb896c0b60d9f853fc.exe
-
Size
7.8MB
-
MD5
f557de0b0cd0296afaa9804a3624a067
-
SHA1
97b8427340b99e40ed6a485a76dae4322490f41f
-
SHA256
bd94e873771fc47f7c5beb5b64a5fc8b85edfd0b86fe48cb896c0b60d9f853fc
-
SHA512
89207c2574619d470d1591cc8934ebcfe1440835bbf20715632eb6b5895c64af1e143a982ee0135532e606958a10328dcca1e138ab9c602d49061a8a2f051701
-
SSDEEP
196608:b730/JZvGaFOWwoWllkgmvod9/jLXX+4igF0OtXkn+QJiTmUrh:bD0R9RFiuofLH9iQXkcrh
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bd94e873771fc47f7c5beb5b64a5fc8b85edfd0b86fe48cb896c0b60d9f853fc.exe"C:\Users\Admin\AppData\Local\Temp\bd94e873771fc47f7c5beb5b64a5fc8b85edfd0b86fe48cb896c0b60d9f853fc.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken